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Privacy Council 

Global Privacy Seal Application 

technic^ Overview 

The Privacy Council's Seal Application will be a web application that receives a 
redirected URL from an established Member's web site and displays a Privacy 
Seal to the customer. The presented Privacy Sea! will be comprised of privacy 
laws and insurance policies that apply to the customer's country of residence. 
The customer would then read the agreement and agree or disagree with the 
Privacy Seal that is presented. If the customer agrees, then they press the 
"Agree" button, else the customer would press the "Reject" button. The results 
are returned to the Member^s web site in the form of a privacy seal hash code. If 
the customer pressed the "Agree' button on the Privacy Seal the member web 
site will present a form requesting personal information. When the customer 
submits this fonn a copy of the infonnation is sent to the Privacy Seal Application 
and a copy is submitted to the customers database for further processing. Also, 
the privacy seal hash code must be sent back to the Privacy Sea! Application for 
future tracking. 
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Technical Diagram 

Global Privacy Council Seal Application 
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Technical Details 



Privacy Seal Hash Code 

This hash code will be a composite key that the Privacy Seal Application will use 
to track what Information was presented and agreed upon. This key will contain 
the following informafion: 

> Member Data 

> Date & Time 

> Privacy Law 

> Insurance Policy 

Q 

Seal Application Web Server 

The Seal Application Web Server needs to be an enterprise class web server 
with an enterprise class database to support this web application. I propose that 
the web server be IIS hosted on a Windows NT server. This server should have 
ah Identical twin that the load Is configured Into a load balanced cluster. This 
should ensure redundancy that Is needed to give adequate support to members 
and customers. I recommend Oracle 81 as the database. Oracle is the 
recognized leader of relational database systems and has specific solutions 
conceming Internet database applications. 

easterner Data Storage 

yVhen customer data is returned to the seal Application Web Server the data is 
stored into a database. The privaty seal hash code, sir name, and first name will 
index this database. 
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Database Setup 

The database will need to have the fonowlng tables: 

> Member Details - This table will hold member information. This table will be 
used to track member details and billing Information. 

> Global Privacy l^w - This table will hold privacy laws that are index by the 
country that they apply to. This table will be referenced each lime the Privacy 
Seal is constructed, 

> Global Insurance Policies - This table will hold insurance policies that have 
been agreed to by each member. 

> Global IP Register - This table will be used to resolve an customer's IP 
address into a location. This will help us initially present a Privacy Seal. 

> Activity Log - This table will hold all activity events that occur within the 
Privacy Seal Application 

> Customer Privacy Information - This table will hold all customer information 
that is submitted from a member's web site. 

Member Impact 

The Member would have to make minimal changes to integrate the Global 
Privacy Seal Application into their environment The changes would involve a 
redirected URL firom the customer join page and a duplicate form submissiori 
HTTP request from the personal detail page. The Member would also have to 
accept the privacy seal hash code that will be returned from the Seal Application 
Web Server and pass that hash code back to the Seal Application Web Server 
with personal iriformation gathered. 
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Infrastructure Setup 
Hardware 

> Dual Web Servers 

> Database Server 

> Backup Tape Drive 

Software 

> Oracle 81 

> Web Server 

Services 

to make the Global Privacy Seal Application service perform at an acceptable 
level all over the world choosing a Global Content Provider is critical. By utilizing 
this sen/ice you will be able to increase your custonier's response time no matter 
where they are located. This service is priced at a level of Megabytes Per 
Second (MPS). So, once we can estimate customer base and traffic a price can 
be determined. 

Riesources 

> Web Programmer 

This resource will be responsible for developing the applications that receive 
and redirect member URLs and applications that interact with the database. 

> Oracle Database Administrator 

This resource will be responsible for creating and maintaining the database 
layout to support the Web Programmer's applications. 

> Webmaster 

This resource will be responsible to creating the Privacy Council web site. 
This is the interface that the public will see. The web site should be seen as a 
selling and marketing tool. The web site can also be used as an input device 
for consumer responses. 
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Member Website 




S&J Process Sequance & Content 
Seal Request 

(a) Send: Member ID, Customer IP 



(b) Send Encrypted: Seal Key.& Response 

Seal Completion 

(c) Send: Seal Key, Customer Account information 

(d) Send Encrypted: Seal Key. Customer First Name, Surname, 

All Customer Account information (as one field) 

SealArchi\nng 

(e) Record Index - Seal Key 

Query Index - Date, First Name. Sumame, Member ID 
Enforcement Index - Expiry Date 
(0 Normal customer data + Seal Key 



Seal Key Structure 
Date & Time 
Member ID 
Customer IP 
Privacy Policy ID 
Insurance ID 
Language ID 
+ Check Digit 
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Confidential and Proprietary Information 
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MEMBER 




Network Providers 




CUSTOMER 
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Privacy & Insurance 
verbiage for user's 
locale 

0 Accept 
0 Reject 
Ciiange Locale 
More Infonnation 



Customer 
Personal Detail Page 
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